• RSS
  • Twitter
  • FaceBook

Security Forums

Log in

FAQ | Search | Usergroups | Profile | Register | RSS | Posting Guidelines | Recent Posts

query about IPSec protocol

Users browsing this topic:0 Security Fans, 0 Stealth Security Fans
Registered Security Fans: None
Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Exploits // System Weaknesses

View previous topic :: View next topic  
Author Message
cranium2003
Just Arrived
Just Arrived


Joined: 05 Jan 2005
Posts: 0


Offline

PostPosted: Wed May 04, 2005 6:29 pm    Post subject: query about IPSec protocol Reply with quote

hello,
Got two IPSec question.
1) In AH protocol mutable IPv4 fields that cannot be proteted are
Type of Service (TOS)
Flags
Fragment offset
TTL
Header Checksum
So that mean when MAC hash is calculated those fileds are removed. So i want to ask that mean packet is crosscheked only at end points of communication?
Because when in path packet goes through Router to Router then adjecent routers have same hash at sending router1 routine and receiving routine then why not to include those fields? or its the case that routers only forward packet by checking IP header destination address?

2) Does IPSec is really vulnerable to man in middle attacks? if its possible then when packet reaches to application layer of end system, end system drops the packet in HMAC calcualation? Is that right?
Back to top
View user's profile Send private message
Display posts from previous:   

Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Exploits // System Weaknesses All times are GMT + 2 Hours
Page 1 of 1


 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Community Area

Log in | Register